文章基本信息

标题：Modeling and Detecting Stepping-Stone Intrusion
本地全文：下载
作者：Yongzhong Zhang ; Jianhua Yang ; Chunming Ye 等
期刊名称：International Journal of Computer Science and Network Security
印刷版ISSN：1738-7906
出版年度：2009
卷号：9
期号：7
页码：200-205
出版社：International Journal of Computer Science and Network Security
摘要：Most network intruders launch their attacks through stepping-stones to reduce the risks of being discovered. To uncover such intrusions, one prevalent, challenging, and critical way is to compare an incoming connection with an outgoing connection to determine if a computer is used as stepping-stone. In this paper, we present four models to describe stepping-stone intrusion. We also propose the idea applying signal processing technology to stepping-stone intrusion detection. We present the preliminary results of applying correlation coefficients to detecting stepping-stone intrusion. The contribution of this paper is that we are the first to apply correlation coefficient to stepping-stone detection, and more importantly, it does not have to monitor a session for a long time to conclude if there is a stepping-stone intrusion. Applying DFT and Z-transform to stepping-stone detection is under way.
关键词：Stepping-stone; network security; intrusion detection; modeling stepping-stone intrusion